Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Screensaver GPO by computer OU

Posted on 2010-08-30
25
Medium Priority
?
2,767 Views
Last Modified: 2012-05-10
I'm trying to force a specific screensaver, but I only want it to go on computers in a certain OU.  This is on Server 2008 and windows 7 machines.  See attached image for the GPO.  On the target computers the screensaver still shows none.  Everyone that logs in does have the S: drive and read access to that location as well.  Any suggestions?

Thanks
screensaver.JPG
0
Comment
Question by:sjsell
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 11
  • 6
  • 5
  • +1
25 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33558555
The reason is the screensaver is a user policy not a computer policy so it is applied to Users not computers.

You can try settings up loopback processing.

http://support.microsoft.com/kb/231287

http://technet.microsoft.com/en-us/library/cc782810(WS.10).aspx

http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/A_1876.html
0
 
LVL 5

Expert Comment

by:jlanderson1
ID: 33558602
Well..this is a user policy, so it would apply to USERS in an OU.  If you apply this to a COMPUTER OU, it will not apply to users.

So, for example, if this were for the Accounting computers, could you organize the OU's like this....?

Accounting
    |-> COMPUTERS
    |-> USERS

You could then apply this to the "Accounting OU", and it would apply to the Users.  Granted, this will apply to those users if they logged into other computers not in that OU....but, would this still serve your purpose?
0
 
LVL 5

Expert Comment

by:jlanderson1
ID: 33558618
Loopback processing typically works in the opposite way.  You would enable loopback on a Server such as Citrix or Terminal Server to apply the users' policies.  I don't believe it works in this case.
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:sjsell
ID: 33558633
I have loopback processing enabled (see screen shot) as far as I can tell.  I have it in merge mode.  Am I missing anything else?

Thanks for the articles
0
 

Author Comment

by:sjsell
ID: 33558658
@jlanderson1:   I wanted to avoid setting it to users.  It is a screensaver that the Learning Resource Centers director created and she wants it playing on the computers in the Learning Resource Center.  We don't really want it playing on all computers in the school.  If there's no other way I will discuss it with her to see if that is ok.
0
 
LVL 5

Expert Comment

by:jlanderson1
ID: 33558660
If you do try loopback...which I use in our Citrix environment...go here....

 In Group Policy Editor:

Computer Configuration\Administrative Templates\System\Group Policy\User Group Policy loopback processing mode

***Set this value to Merge, so other policies you have applied to the Users take effect.***
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 33558674
I always wonder why people want to use screen savers for PCs not for users. Could you explain me, please? Thank you in advance :)
0
 
LVL 5

Assisted Solution

by:jlanderson1
jlanderson1 earned 680 total points
ID: 33558682
sjsell...sorry...I didn't see your post with the loopback.  Have you tried to use the UNC path to the screensaver instead of a mapped drive letter?  Also, you could test this with a local screensaver, just to make sure it is not a network issue.  If the local screensaver works, I would then test with UNC.
0
 
LVL 39

Assisted Solution

by:Krzysztof Pytko
Krzysztof Pytko earned 520 total points
ID: 33558684
You can set up this settings to particular group of users and use group policy filtering. I think it's the most simple method

http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33558688
Loopback will work no matter if it is a TS, Citrix or normal servers.
0
 

Author Comment

by:sjsell
ID: 33558694
@iSiek:  We are a school and our students log into multiple PC's around the school.  We have a learning Resource Center (LRC) and only want the screensaver playing on those computers no matter who logs in.  We do not want that screensaver playing on all the computers at the school.  It's not a huge deal if it does play on all, it's just if we can have it only playing on the LRC's machines that is what we would prefer.
0
 
LVL 5

Expert Comment

by:jlanderson1
ID: 33558698
iSiek...If you have, for example, computers in an HR Department, you would want a screensaver policy with password protection, regardless of who is logged into it.  In instances like this, you would want this to apply to computers.
0
 

Author Comment

by:sjsell
ID: 33558742
Wow, so much information in such a short amount of time :)   I will read through everything and test using UNC path instead this morning and let you all know.

Thanks for the fast responses.
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 33558746
Thank you for explanation :) So, the only choice is a loopback processing as dariusq wrote.
0
 
LVL 5

Expert Comment

by:jlanderson1
ID: 33558804
It looks like, if you don't want to use User Policies, you should use the Loopback policy which wasn't your issue, because you were already using it.  But, I think the UNC will probably solve your issue.
0
 

Author Comment

by:sjsell
ID: 33559207
UNC path did not resolve the issue, but during testing a defeating light bulb turned on in my head.  Getting this to work for a user logged on to the computer doesn't actually do what I need.  Thinking about it I realized I want the screensaver to be playing when nobody is logged in.  So I need it to play when it's at the CTRL-ALT-DEL screen.  How do I go about doing that?  

Thanks
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33559260
You will need to go to Power Options and set the setting here which will make the monitor turn off.

http://www.eggheadcafe.com/software/aspnet/29874483/gpo-to-force-screen-saver-on-login-screen.aspx
http://www.theeldergeek.com/logon_screen_saver.htm
0
 

Author Comment

by:sjsell
ID: 33559509
I have added the registry keys and it appears to launch the screen saver (we have slides as the screen saver) but it just displays black screens  I'm assuming it is not going into any powersave mode cause the monitor light stays green instead of going to amber like it does when it goes into powersave mode.  I have tested the screen saver while logged in and it works fine.  
0
 

Author Comment

by:sjsell
ID: 33559691
Don't know if it matters or not, but I am using the Photoscreensaver.scr.  I have attached 3 screenshots one showing the registry settings, the next showing the screensaver.scr configuration and the third showing the permissions where the slides are kept.  They are all in .bmp format as that is what Powerpoint created them as.  I have tried changing the ScreenSaveIsSecure in the registry to a 1 as well rebooting and still displays a black screen.
screensaver.jpg
Screensaversettings.jpg
Folderpermissions.jpg
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33559712
So, you are getting a black screen?
0
 

Author Comment

by:sjsell
ID: 33559783
Yes.  after 10 seconds the screen goes black (monitor light stays green)  I found this post on
http://help.lockergnome.com/general/windows-logon-screensaver--ftopict64047.html
To enable the screensaver, first choose the screensaver you want. Look in C:\WINDOWS\SYSTEM32 for files with the .SCR extension - typically there are the following (at least on my Enterprise Installation)...

- SSTEXT3D - 3D Text
- BUBBLES.SCR - Bubbles
- MYSTIFY.SCR - Mystify
- PHOTOSCREENSAVER.SCR - Photos
- RIBBONS.SCR - Ribbons

One of the things to be aware of is that you don't appear to have Direct3D support at the logon screen so the builtin screensavers above won't work. Unless you have another file you might want to grab the LOGON.SCR file from an earlier operating system.

Looks like I can not use the Photoscreensaver.scr cause it requires Direct3d support.  Any suggestions so I can use photos as the prelogon screen saver.

Thanks
0
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 800 total points
ID: 33559863
0
 

Author Comment

by:sjsell
ID: 33559930
Thanks.  I found this
http://webcache.googleusercontent.com/search?q=cache:KHoubLf0BlYJ:www.insidetheregistry.com/content/viewarticle.aspx%3Farticleid%3D1824+logon+screensaver+windows+7+photos&cd=2&hl=en&ct=clnk&gl=us 
and have been testing it. Will let you all know the results....wouldn't expect a fricken screensaver to be so difficult to get working hehe.
0
 

Author Comment

by:sjsell
ID: 33560025
GOT IT.  First I ignored the registry settings in my link and then it was showing no files found in c:\windows.  Changed the registry settings and it all works now.

Thanks all for the help.
0
 

Author Closing Comment

by:sjsell
ID: 33560035
Thank you all for the help.  
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question